Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Fingerprint is a device intelligence platform offering industry-leading accuracy. The Fingerprint Server Node SDK is an easy way to interact with the Fingerprint Server API from your Node application.

A secure, distroless Node.js base image built entirely FROM scratch. No shell. No package manager. No OS utilities. Just Node.js — and nothing else. Runtime Node is a production-grade Docker base ...

Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and execute arbitrary code. A critical vulnerability has been patched in vm2, a ...

Nahda Nabiilah is a writer and editor from Indonesia. She has always loved writing and playing games, so one day she decided to combine the two. Most of the time, writing gaming guides is a blast for ...

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system. The open-source ...

Node.js has released updates to fix what it described as a critical security issue impacting "virtually every production Node.js app" that, if successfully exploited, could trigger a denial-of-service ...

What happens when a innovative AI research company acquires one of the fastest JavaScript runtimes on the market? The tech world is abuzz with the news that Anthropic has acquired Bun, a move that ...